This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Application Control incorrect identification of udp 5060 traffic as "MagicJack"

Hi all
For those that use their Firewall for VOIP services.
If you have Application Control turned on some SIP udp 5060 traffic will be identified as "MagicJack".
If you have Application Control turned on to "Drop" and "MagicJack" selected under Streaming Services your VOIP trunks will not be able to register.

Mark

2013:06:30-13:53:51 vncs ulogd[4854]: id="2017" severity="info" sys="SecureNet" sub="packetfilter" name="AFC Alert" action="log" fwrule="2" outitf="eth1" mark="0x207c" app="124" srcmac="0:c:29:f5:a6:e7" srcip="192.168.10.100" dstip="208.67.222.222" proto="17" length="74" tos="0x00" prec="0x00" ttl="63" srcport="37065" dstport="53"
2013:06:30-13:53:55 vncs ulogd[4854]: id="2017" severity="info" sys="SecureNet" sub="packetfilter" name="AFC Alert" action="log" fwrule="1" outitf="eth1" mark="0x21bd" app="445" srcmac="0:c:29:f5:a6:e7" srcip="192.168.10.100" dstip="202.169.178.10" proto="17" length="589" tos="0x00" prec="0x60" ttl="63" srcport="5060" dstport="5060"
2013:06:30-13:53:55 vncs ulogd[4854]: id="2017" severity="info" sys="SecureNet" sub="packetfilter" name="AFC Alert" action="log" fwrule="1" outitf="eth1" mark="0x21bd" app="445" srcmac="0:c:29:f5:a6:e7" srcip="192.168.10.100" dstip="202.85.243.105" proto="17" length="639" tos="0x00" prec="0x60" ttl="63" srcport="5060" dstport="5060"
2013:06:30-13:53:56 vncs ulogd[4854]: id="2017" severity="info" sys="SecureNet" sub="packetfilter" name="AFC Alert" action="log" fwrule="1" outitf="eth1" mark="0x21bd" app="445" srcmac="0:c:29:f5:a6:e7" srcip="192.168.10.100" dstip="125.213.160.81" proto="17" length="621" tos="0x00" prec="0x60" ttl="63" srcport="5060" dstport="5060"

This thread was automatically locked due to age.